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USER AT SOURCE ENDPOINT 5 ENTERS SBRVICE DOMAIN NAME 

NAME RESOLUTION LAYER 37 INTERCEPTS THE SERVICE DOMAIN NAME INFORMATION 

i 

NAME RESOLUTION LAYER 37 RETURNS A FALSE 
2 * 0 ADDRESS OR A LOCAL SERVICE IP ADDRESS 

\ 

_ A tjamE RESOLUTION LAYER 37 RECORDS A TABLE ENTRY ASSOCIATING 
23 0 NAME raSOLUTONLA ^ ^ KEJ[mJED ff ADDRESS 

9 *tO RECORDED ENTRY IS SHARED WITH THE DATA LAYER 39 

* 6 O INITIATION REQUEST IS INTERCEPTED BY THE DATA LAYER 39 

» DETERMINES THAT A FIREWALL TRAVERSAL SESSION IS NEEDED 
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DATA LAYER 39 Lcu^™«- ■ 

DATA LAYER 39 ISSUES A VBlTOAL HOSTNAME RESOLUTION 
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REQUEST TO THE SERVICE 15 
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THE SERVICE 1 5 RETURN S AN IP ADDRESS IDENTIFYING THE SERVER TO BE 
THE SERVICE FIREWA LL TRAVERSAL SESSION 

<3 CO FIREWALL TRAVERSAL SESSION IS ESTABLISHED 

detep^ewhetherforwardLorrelaymodeistobeused 



YES 



IS RELAY MODE TO BE USED? 



NO 



SESSION SERVER IDENTIFIES 
THE SERVER WITH WHICH THE 
FIREWALL TRAVERSAL SESSION 
IS ESTABLISHED TO THE 
DESTINATION POINT — 



1 



SESSION SERVER ESTABLISHES 3 
A TRANSPORT LEVEL 
COMMUNICATIONS 
CONNECTION TO THE 
DESTINATION POINT 



33 <i TABLE ENTRIES OF THE SERVER ADDRESSES ARB RECORDED 
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